What are the minimum permission required to backup the SQL Server 2012 DB using Symantec Back Exec 2014?

I am puzzled by your inquiry.
why are you looking to limit the backup application rather than managing who can use/access the backup application/system?

who is authorized to use admin/backup exec?

Hi..
Thanks for the quick response..

Scenario is, in my Company there are 12 different server like SQL Server - 1, SQL Server - 2, File Server, Exchange Server etc..

There is a System Administrator who ONLY takes care of Backups regularly using Symantec Back Exec 2014 for all the Co. Servers.

This System Administrator is NOT the SQL Server DBA, only Windows Administrator, but to take the Backups of SQL SERVERS, we provided him access with Windows Account (AD A/c) with full permission like "sysadmin" or "sa" of SQL Server.

I want to cut down this much of access from him.

Is there a way wherein we can allow this System Admin (only backup admin) to have limited access on SQL SERVER?

Is there any option that, we create only SQL User (using SQL Server Authentication) and he uses this A/c for Backups?

OR

Is there any alternative where we create a user A/c in Symantec without sysadmin(SQL) privileges and allow user to take SQL Servers Backups?

Request you to provide Solution..
Thanks in advance...

A: you do not need to be sql sa role member to backup\restore databases (see above post)
If you use BE Sql agent: these permissions must be granted to the "service" (AD login) account

Thus , if your do not need this person to do manual direct restore \backup on sql server: you can delete his sql server login
otherwise: remove his sql sa role membership and grand just  db_backupoperator
----
Normally, as the main idea, all is done via BE sql agent... and backup exec console policies: where from all control and monitoring van be done
without going into sql server directly.

more:

BESA backup is done by BE sql server agent (service): that you should set with "service logion"  as above permissions (not SA)
BE operator (human) should not have direct access to sql server (just on Box to install agent) :

Best permissions for backup user for BE agent - SQL server
http://www.symantec.com/connect/forums/best-permissions-backup-user-be-agent-sql-server

Understanding Logon Accounts and required User Rights Assignment to resolve connection, backup or restore failures
https://support.symantec.com/en_US/article.TECH130255.html


For more information about the SQL Agent, see the Backup Exec Administrator's Guide.

IMHO, a person solely tasked with Backup operator roles as was pointed out should not have any credentials on the sql server. And usually will not be the person tasked with restoring a DB.
The restore requires not simply access to the restore agent but sufficient knowledge to check and make sure everything needed for the restore, i.e. if you are restoring a DB to a separate server, making sure logins needed for the DB are present.

There are other consideration i.e. how the DB is setup/log shipping/mirroring/..etc. that a restore without the information might become ...

Presumably, someone else DBA/Sysadmin have tested the backups to make sure they are functional on a regular interval.

db_backupoperator - Members of the db_backupoperator fixed database role can back up the database.

https://msdn.microsoft.com/en-us/library/ms189121.aspx

Mohammed, do you still need help with this question?

Thank you all... for providing useful information

my Testing with this problem is still going-on..:

Dear Mr. EugeneZ

now I'm facing this issues which is already raised, could you please explain this?

https://www.experts-exchange.com/questions/28458913/Backup-Exec-2014-cannot-connect-to-SQL-database.html

I need solution for this..
Please find the attachment(screenshots)

Thanks in advance..
SQL-Account-cannot-be-selected.png
Scenario.png